MervinPraison PraisonAI

Latest vulnerabilities

• CVE-2026-57148 CVSS 9.8 critical PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py falls back to the public…
• CVE-2026-57147 CVSS 9.8 critical PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py assigns the public…
• CVE-2026-57141 CVSS 9.8 critical PraisonAI is a multi-agent teams system. Prior to 1.7.2, the codeMode tool in src/praisonai-ts/src/tools/builtins/code-mode.ts executes…
• CVE-2026-57140 CVSS 9.4 critical PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos.ts uses the 0.0.0.0 default…
• CVE-2026-57139 CVSS 9.8 critical PraisonAI is a multi-agent teams system. From 1.5.0 until 1.7.2, MCPServer.startHttp() in src/praisonai-ts/src/mcp/server.ts binds without…
• CVE-2026-57138 CVSS 9.9 critical PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in src/praisonai-ts/src/tools/builtins/code-mode.ts executes…
• CVE-2026-57137 CVSS 8.8 high PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop() in src/praisonai-ts/src/ai/agent-loop.ts passes…
• CVE-2026-57136 CVSS 8.8 high PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, CommandValidator in src/praisonai-ts/src/cli/features/sandbox-executor.ts…
• CVE-2026-57135 CVSS 7.6 high PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, SandboxExecutor network-isolated mode in…
• CVE-2026-57134 CVSS 8.2 high PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mcp/security.ts…
• CVE-2026-57133 CVSS 8.8 high PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, the shell() helper exported from…
• CVE-2026-57112 CVSS 8.3 high PraisonAI is a multi-agent teams system. From praisonaiagents 0.6.0 until 1.6.59 and PraisonAI 3.10.0 until 4.6.59…
• CVE-2026-57145 CVSS 9.1 critical PraisonAI is a multi-agent teams system. Prior to 4.6.62, src/praisonai/praisonai/tools/multiedit.py passes the LLM-controlled filepath…
• CVE-2026-57132 CVSS 8.2 high PraisonAI is a multi-agent teams system. Prior to 4.6.62, setting PRAISONAI_CALL_AUTH to disabled makes verify_token accept requests to…
• CVE-2026-57131 CVSS 9.8 critical PraisonAI is a multi-agent teams system. Prior to 4.6.58, praisonai.jobs.server.create_app mounts praisonai.jobs.router.create_router…
• CVE-2026-57127 CVSS 9.8 critical PraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve installs APIKeyAuthMiddleware or JWTAuthMiddleware when an operator…
• CVE-2026-57124 CVSS 9.8 critical PraisonAI is a multi-agent teams system. Prior to 4.6.59, the default UI host applications expose POST /api/mcp/connect without mandatory…
• CVE-2026-57122 CVSS 8.6 high PraisonAI is a multi-agent teams system. Prior to 4.6.59, the WhatsApp and Linear bot webhook handlers verify HMAC signatures only when…
• CVE-2026-57119 CVSS 7.5 high PraisonAI is a multi-agent teams system. Prior to 4.6.59, the unauthenticated Jobs API accepts an absolute or traversing agent_file path…
• CVE-2026-56839 CVSS 7.3 high PraisonAI is a multi-agent teams system. Prior to 4.6.59, the CODE_TOOLS wrappers keep _workspace_root as None and pass workspace=None to…
• CVE-2026-57128 CVSS 4.3 medium PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the SSE server in…
• CVE-2026-57126 CVSS 8.5 high PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, SpiderTools._validate_url calls _host_is_blocked, which checks…
• CVE-2026-57125 CVSS 9.8 critical PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.59 and praisonaiagents 1.6.59, the unauthenticated POST /api/v1/runs Jobs…
• CVE-2026-57115 CVSS 6.5 medium PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, SpiderTools.scrape_page validates only the initial URL and lets…